Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa
File:                     3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier:          eSQAozM0hQtPpjXyo1fxJS15HmlCH4moxrR7XEa8ZTE=
Subject key identifier:   0B:59:C2:3B:6F:ED:F9:EE:F5:AD:F5:CD:65:A4:2D:F0:1B:88:67:98
Certificate issuer:       /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial:       4B48C3B3FC1AD727C67FD6DEF02B9A2645B06937
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa
Signing time:             Mon 10 Aug 2026 20:32:06 +0000
ROA not before:           Mon 10 Aug 2026 20:27:06 +0000
ROA not after:            Mon 09 Aug 2027 20:32:06 +0000
asID:                     263975
IP address blocks:        138.255.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
                          rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:48:c3:b3:fc:1a:d7:27:c6:7f:d6:de:f0:2b:9a:26:45:b0:69:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
        Validity
            Not Before: Aug 10 20:27:06 2026 GMT
            Not After : Aug  9 20:32:06 2027 GMT
        Subject: CN=0B59C23B6FEDF9EEF5ADF5CD65A42DF01B886798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:65:33:98:07:8a:66:79:ff:aa:1b:e4:cc:
                    cc:90:63:a0:ab:ed:55:ae:2f:44:e1:04:ca:64:b5:
                    96:cd:bc:7b:66:6a:61:e0:1c:7b:80:e5:38:f9:80:
                    f1:44:a9:a9:16:c1:df:da:97:3d:07:0c:01:e6:62:
                    46:fd:46:e5:0a:ba:cd:5a:3c:8d:67:5e:4f:d4:2e:
                    72:6b:a8:04:2b:74:dd:5a:84:a4:4c:2e:41:39:73:
                    19:25:25:e5:37:75:2e:6d:e0:6c:06:51:ad:63:9d:
                    46:67:41:b0:0a:4f:28:31:04:65:12:d7:3e:41:29:
                    b9:4f:40:a0:e1:a1:4f:c1:f5:2e:82:18:db:49:ac:
                    1a:f9:23:16:86:c3:cf:6d:52:b4:f6:49:f0:24:08:
                    d8:32:07:3d:b6:28:d5:05:e4:05:91:b0:5a:6b:28:
                    65:65:e1:3b:99:2b:1b:de:89:09:86:59:a9:2f:ff:
                    39:a3:8a:1b:0a:1d:b7:63:f6:8a:c3:b9:97:db:47:
                    45:71:fa:4d:03:ec:da:83:89:24:3d:12:ba:ee:1a:
                    a0:7b:ce:d0:bf:c8:08:69:e3:63:d6:6b:b7:44:92:
                    00:4f:22:8c:8d:61:f4:b7:11:d4:da:f5:bd:ad:ad:
                    65:ce:2b:98:3c:56:a5:73:1e:a1:70:95:93:e8:5d:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:C2:3B:6F:ED:F9:EE:F5:AD:F5:CD:65:A4:2D:F0:1B:88:67:98
            X509v3 Authority Key Identifier:
                keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:19:05:33:23:27:7c:70:f4:77:66:41:92:e6:bd:ef:e4:
         ca:e8:7d:2a:ce:9c:69:a4:76:ed:2c:c6:9e:5b:32:db:aa:a4:
         00:b1:a2:fa:61:43:56:ae:bd:d1:4e:8a:ec:f1:7b:b2:aa:d9:
         e2:01:da:6e:fb:91:ec:d1:09:d5:6b:84:fd:08:d2:1f:35:a6:
         4c:24:30:df:3d:b3:f0:95:6c:1d:57:50:5a:09:36:26:07:16:
         dc:76:1e:0b:a4:6b:a6:ff:e1:61:00:bd:78:c8:93:42:56:16:
         59:c7:a2:fa:5e:50:27:65:97:e2:15:fd:c7:cd:b5:b4:77:95:
         f2:89:5f:ef:58:83:30:6a:10:a0:b2:aa:37:af:40:9a:71:ba:
         00:21:f7:e5:f5:7a:be:b4:b8:4b:01:8d:70:2f:06:f2:27:54:
         0c:9a:d1:c4:1f:5f:3d:ab:26:2f:59:34:87:da:06:24:2c:b2:
         bd:ef:b9:64:a7:e4:0f:f0:6d:85:0c:f2:30:5c:98:33:a9:bf:
         39:43:5b:43:bc:8f:78:bc:6f:92:66:34:59:4c:ed:45:52:4d:
         a9:25:2a:ee:57:9f:e6:da:51:af:d6:65:e2:15:b3:46:b7:f3:
         76:f2:14:93:10:85:26:12:b5:3a:34:09:33:1a:3c:1a:fc:28:
         07:7f:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 18:02:09 2026 by rpki-client